94694e56c6d22a0115a3dc615597f5e24a5f844fb5a250a4b71f673cfc2d0d02

Analysis

max time kernel
7s
max time network
143s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
07-01-2025 21:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

base.apk
Size

3.5MB
MD5

fa8d37206d1d58c9803a01aca091a40f
SHA1

31d828b8fc6d0286eb2cb56ff49a464ecaf4c4e4
SHA256

2bf76945694c257d9bb1533c70075fbabce2d8671b476b7478421389ed258980
SHA512

f711906fc415bb67c1820bbf1b2f07cbc7d3a5ba59ddcbc1d94e3c490dd4bcdd9949ad4e68681150d627394de93a37fda2a02cf01aceac14f9db602656cf6371
SSDEEP

98304:D1y8VlJ807H8/jRRb4A1RtZLrqOfLDcjzn:Zy8V386H8PbptZL3zDc/n

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.example.mysoul
/dev/qemu_pipe	com.example.mysoul

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.example.mysoul

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.example.mysoul
1⤵
- Checks known Qemu pipes.
- Queries information about running processes on the device
PID:4604

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.example.mysoul/no_backup/androidx.work.workdb

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
160593a113ced0101f0f348ffcbef985

SHA1
71fb214eece6dd2848410e9798d2aaf6aafe7032

SHA256
e1225b7fc8b20a7e64321ba6a2ec57849525c5b16d0e86faa9bab031d5e274bf

SHA512
34c33990093deb1d1d4834dda2cbf873dac5bc2ecaded58ebf8a1ecef868be21530764cfe53a7f3c413e4b3dd8884d9498a1575ed5978e32dd33d4267b8e82ae

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
dfbb717d5d05b95e5639d47238c84997

SHA1
458c028a0d9196d4f176c481a8586535c7499c7f

SHA256
df01d8b68c98db4553964e5c08e7afe00f8d5b82b6cec533bd219b7aee3b1b41

SHA512
e8f47c3a6bce3ef93742a2364fcc022e8212b0f426e511bbb435819129b0ca93d1f90f32a4cdce5fc017dfc04958ee68e4ec15187e5604d41869df9d6924c37a

Download Submit
/data/data/com.example.mysoul/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
7f1295a99c77167124def3c0f3e7006a

SHA1
743bb8be2d9c3b1c81d56b50161089b000f2da70

SHA256
f57d0275ab7d6c2b7afd2116884929859280de23b9daf81f61fe3499e20b1028

SHA512
cb241cd4cfbd53453bbacb240a1c1ae97bd15a984127ce924422f868a5fba83db5a8849189c400cba46bec76f187d0c6cc775c3d596e854720001745c61db412

Download Submit